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Abstract 

We consider the design of self-testers for quantum gates. A self-tester for the gates 
Fi,... ,F,n is a classical procedure that, given any gates Gi,... ,Gm, decides with high 
probability if each d is close to Fi. This decision has to rely only on measuring in the 
computational basis the effect of iterating the gates on the classical states. It turns out that 
instead of individual gates, we can only design procedures for families of gates. To achieve 
our goal we borrow some elegant ideas of the theory of program testing: we characterize the 
gate families by specific properties, we develop a theory of robustness for them, and show 
that they lead to self-testers. In particular we prove that the universal and fault-tolerant set 
of gates consisting of a Hadamard gate, a c-NOT gate, and a phase rotation gate of angle n/4 
is self-testable. 

1 Introduction 

In the last decade quantum computing has become an extremely active research area. The initial 
idea that the simulation of quantum physical systems might be out of reach for classical devices 
goes back to Feynman|l^. He raised the possibility that computational devices based on the 
principles of quantum mechanics might be more powerful than classical ones. This challenge to 
the quantitative version of the Church- Turing thesis, which asserts that all physically realisable 
computational devices can be simulated with only a polynomial overhead by a probabilistic Turing 
machine, is the driving force behind the study of quantum computers and algorithms. 

The first formal models of quantum computing, the quantum Turing machine and quantum 
circuits were defined by Deutsch||l^, Yao has shown |^ that these two models have polyno- 
mially equivalent computational power when the circuits are uniform. In a sequence of papers 
oracles have been exhibited JT6| , |^, ^, relative to which quantum Turing machines are more 
powerful than classical (probabilistic or non-deterministic) ones. These results culminated in the 
seminal paper of Shorp3[| where he gave polynomial time quantum algorithms for the factoring 
and the discrete logarithm problems. 

A quantum circuit operates on n quantum bits (qubits), where n is some integer. The actual 
computation takes place in the Hilbert space C^°'^^ whose computational basis consists of the 2" 
orthonormal vectors |i) for i e {0, 1}". According to the standard model, during the computation 
the state of the system is a unit length linear superposition of the basis states. The computational 
steps of the system are done by quantum gates which perform unitary operations and are local in 
the sense that they involve only a constant number of qubits. At the end of the computation a 
measurement takes place on one of the qubits. This is a probabilistic experiment whose outcome 
can be or 1, and the probability of measuring the bit b is the squared length of the projection 
of the superposition to the subspace spanned by the basis states that are compatible with the 
outcome. As a result of a measurement, the state of the system becomes this projected state. 

*C.W.I. Amsterdam; Centre for Quantum Computation, University of Oxford. wlmvdamOqubit . org 
tUniversite Paris Sud, LRI. magniezairi . f r 

tUniversity of Waterloo; Centre for Quantum Computation, University of Oxford, mosca@qubit.org 
SCNRS, Universite Paris Sud, LRI. santhaOlri . f r 



1 



The most convenient way to describe all possible operations on a quantum register is in the 
formalism of 'density matrices'. In this approach, which differs from the Dirac notation, the quan- 
tum operations are described by completely positive superoperators (CPSOs) that act on matrices. 
These density matrices describe mixed states (that is, classical probability distributions over pure 
quantum states), and the CPSOs correspond exactly to all the physically allowed transformations 
on them. Such a model of quantum circuits with mixed states was described by Aharonov, Kitaev 
and Nisanl^, and we will adopt it here. The unitary quantum gates of the standard model and 
measurements are special CPSOs. CPSOs can be simulated by unitary quantum gates on a larger 
number of qubits, and in it was shown that the computational powers of the two models are 
polynomially equivalent. 

Unitary quantum gates for small number of qubits have been extensively studied. One reason 
is that although quantum gates for up to three qubits have already been built, constructing gates 
for large numbers seems to be elusive. Another reason is that universal sets of gates can be 
built from them, which means that they can simulate (approximately) any unitary transformation 
on an arbitrary number of qubits. The first universal quantum gate which operates on three 
qubits was identified by Deutsch |]l^ . After a long sequence of work on universal quantum gates 
0, |, m, H, |6[ H ^, |§, Boykin et al.§ have recently shown that the set consisting of a 
Hadamard gate, a c-NOT gate, and a phase rotation gate of angle 7r/4 is universal. In order to 
form a practical basis for quantum computation, a universal set must also be able to operate in 
a noisy environment, and therefore has to be fault-tolerant ||, |2^. The above set of three 
gates has the additional advantage of also being fault-tolerant. 

Experimental procedures for determining the properties of quantum "black boxes" were given 
by Chuang and NielsenlQ and Poyatos, Cirac and Zoller[^, however these procedures implicitly 
require apparatus that has already been tested and characterized. 

The idea of self-testing in quantum devices is implicit in the work of Adleman, Demarrais 
and IIuang||l|. They have developed a procedure by which a quantum Turing machine is able to 
estimate its internal angle by its own means under the hypothesis that the machine is unitary. 
In the context of quantum cryptography Mayers and Yaop5|| have designed tests for deciding if a 
photon source is perfect. These tests guarantee that if source passes them then it is adequate for 
the security of the Bennett-Brassard g quantum key distribution protocol. 

In this paper we develop the theory of self-testing of quantum gates by classical procedures. 
Given a CPSO G for n qubits, and a family T of unitary CPSOs, we would like to decide if G 
belongs to T. Intuitively, a self-tester is a procedure that answers the question "G G ?" by 
interacting with the CPSO G in a purely classical way. More precisely, it will be a probabilistic 
algorithm that is able to access G as a black box in the following sense: it can prepare the classical 
states w € {0, 1}", iterate G on these states, and afterwards, measure in the computational basis. 
The access must be seen as a whole, performed by a specific, experimental oracle for G: once the 
basis state w and the number of iterations k have been specified, the program in one step gets back 
one of the possible probabilistic outcomes of measuring the state of the system after G is iterated 
/c-times on w. The intermediate quantum states of this process cannot be used by the program, 
which cannot perform any other quantum operations either. For < (5i < ^2, such an algorithm 
will be a (i5i, i52)-tester for T if for every CPSO G, whenever the distance of G and T is at most 
5i (in some norm), it accepts with high probability, and whenever the same distance is greater 
than (52, it rejects with high probability, where the probability is taken over the measurements 
performed by the oracle and by the internal coin tosses of the algorithm. Finally we will say that 
T is testable if for every 62 > 0, there exists < Si < S2 such that there exists a {5i, (S2)-tester for 
JF. These definitions can be extended to several classes of CPSOs. 

The study of self-testing programs is a well-established research area which was initiated by 
the work of Blum, Luby and RubinfeldQ, Rubinfeld|2|, Lipton[|3| and Gemmel et al.|jl||. The 
purpose of a self-tester for a function family is to detect by simple means if a program which 
is accessible as an oracle computes a function from the given family. This clearly inspired the 
definition of our self-testers which have the particularity that they should test quantum objects 
that they can access only in some particular way. The analogy with self-testing does not stop with 
the definition. One of the main tools in self-testing of function families is the characterization of 
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these families by robust properties. Informally, a property is robust if whenever a function satisfies 
the property approximately, then it is close to a function which satisfies it exactly. The concept of 
robustness was introduced and its implication for self-testing was first studied by Rubinfeld and 
Sudani^ and by Rubinfeld ]3C|]. It will play a crucial role in our case. 

We note in the Preliminaries that for any real the states |1) and e*'''|l) are experimentally 
indistinguishable. This implies that if we start by only distinguishing the classical states and 1 
then there are families of CPSOs which are indistinguishable as well. For example, let H be the 
well-known Hadamard gate, and let H^p be the same gate expressed in the basis (|0), e"^|l)), for 
(fi G [0, 27r). Any experiment that starts in state or 1 and uses only H will produce outcomes 
and 1 with the same probabilities as the same experiment with i?^. Thus no experiment that 
uses this quantum gate alone can distinguish it from all the other Hadamard gates. Indeed, as 
stated later in Fact ^, a family T containing H can only be tested if the entire Hadamard family 
H ~ {H^p : (fi ^ [0, 2tt)} is included in T. 

The main result of this paper is Theorem |^ which states that for several sets of unitary 
CPSOs, in particular, the Hadamard gates family, Hadamard gates together with c-NOT gates, 
and Hadamard gates with c-NOT and phase rotation gates of angle ±7r/4, are testable. This 
last family is of particular importance since every triplet in the family forms a universal and 
fault-tolerant set of gates for quantum computation!^. 

For the proof we will define the notion of experimental equations which are functional equations 
for CPSOs corresponding to the properties of the quantum gate that a self-tester can approximately 
test. These tests are done via the interaction with the experimental oracle. The proof itself 
contains three parts. In Theorems |l|, ^ and |^ we will exhibit experimental equations for the 
families of unitary CPSOs we want to characterize. In Theorem |^ we will show that actually 
all experimental equations are robust; in fact, the distance of a CPSO from the target family is 
polynomially related to the error tolerated in the experimental equations. Finally Theorem ^ 
gives self-testers for CPSO families which are characterized by a finite set of robust experimental 
equations. 

In some cases, we are able to calculate explicitly the polynomial bound in the robustness 
of experimental equations. Such a result will be illustrated in Theorem |^ for the equations 
characterizing the Hadamard family Ti.. 

Technically, these results will be based on the representation of one-qubit states and CPSOs in 
M.^, where they are respectively vectors in the unit ball of R'^, and particular affine transformations. 
This correspondence is known as the Bloch Ball representation. 



2 Preliminaries 

2.1 The quantum state 

A pure state in a quantum physical system is described by a unit vector in a Hilbert space. In 
the Dirac notation it is denoted by \ip). In particular a qubit (a quantum two-state system) is 
an element of the Hilbert space C^"'^^. The orthonormal basis containing |0) and |1) is called 
the computational basis of C^*^'^^. Therefore a pure state \tp) G C^'^'^^ is a superposition of the 
computational basis states, that is, = co|0) + ci|l), with |cop + |cip = 1. A physical system 
which deals with n qubits is described mathematically by the 2"-dimensional Hilbert space which 
is by definition C^"'^} (g) • • • (g) C^°'^\ that is, the n*^ tensor power of C^''^^}. Let N = 2". The 
computational basis of this space consists of the N orthonormal states \i) for < i < iV. Hi 
is in binary notation iii2 ■ ■ - in, then \ii . . .in) = \ii) . . . where this is a short notation for 
\ii) (g • • • (g \in)- All vectors and matrices will be expressed in the computational basis. The 
transposed complex conjugate j?/')^ of \ip) is denoted by (V']. The inner product between jV') and 
\ip') is denoted by and their outer product by \ip){ip'\. 

Quantum systems can also be in more general states than what can be described by pure states. 
The most general states are mixed states, described by a probability distribution over pure states. 
Such a mixture can be denoted by {{pk, iV'fc)) ■ ^ G where the system is in the pure state \ipk) 
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with probability pk- 

Different mixtures (even different pure states \tjj)) can represent the same physical system. 
This notational redundancy can be avoided if we use the formalism of the density matrices. A 
density matrix that represents an n-qubit state is an A'' x TV Hermitian semi-positive matrix with 
trace 1. The pure state in this representation is described by the density matrix ip = \'tl>){ip\, 
and a mixture {{pk, IV'fe)) • A; G N} by the density matrix tp — J2keNPk\'^k) {fpk\- For example, the 
pure states e'^IV), for 7 e [0,27r), or the mixtures {(i, |0)), (i, |1))} and {(i, ^-^^), ^^^)} 
have respectively the same density matrix. 

Since a density matrix is Hermitian semi-positive, its eigenvectors are orthogonal and its eigen- 
values are non- negative. Because the density matrix has trace 1, its eigenvalues sum to 1. Therefore 
a density matrix represents the mixture of its orthonormal eigenvectors, where the probabilities 
are the respective eigenvalues. Note that diagonal density matrices correspond to a mixture over 
pure states \i), fov <i < N. Density matrices that represent pure states have a simple algebraic 
characterization: p is a pure state if and only if it has two eigenvalues, with multiplicity N — 1 
and 1 with multiplicity 1, equivalently p is a pure state exactly when = p. 

A 2 X 2 Hermitian matrix of unit trace is semi-positive if and only if its determinant is between 
and 1/4. Therefore in the case of one qubit, any density matrix p can be written as p = 
p\0){Q\ + (1 — p)|l)(l| -|- Q;|1)(0| -t- a*|0)(l|, where p G [0, 1], and a is a complex number such that 
|a|^ < p(l — p). This density matrix will be denoted by p{p,a). Remark that p{p,a) is a pure 
state exactly when |ap = p{l — p), that is, its determinant is 0. 

2.2 Superoperators 

The evolution of physical systems is described by specific transformations on density matrices, 
that is, on operators. A superoperator for n qubits is a linear transformation on C^^^. A 
positive superoperator (PSO) is a superoperator that sends density matrices to density matrices. 
A completely positive superoperator (CPSO) G is a PSO such that for all positive integers M, 
G (g) Im is also a PSO, where Im is the identity on C'^^^ , CPSOs are exactly the physically 
allowed transformations on density matrices. An example of a PSO for one qubit that is not a 
CPSO is the transpose superoperator T defined by r(|i)(j|) = \j){i\, for < i,j < 1. 

Quantum computation is based on the possibility of constructing some particular CPSOs, 
unitary superoperators, which preserve the set of pure states. These operators are characterized 
by transformations from V{N), the set of N x N unitary matrices. For any A G U(A^), we define a 
CPSO which maps a density matrix p into ApA^ . When the underlying unitary transformation A 
is clear from the context, by somewhat abusing the notation, we will denote this CPSO simply by 
A. If lip') denotes A\^p), then the unitary superoperator A maps the pure state ip to the pure state 
ip'. As was the case in the Dirac representation of states, there is the same phase redundancy in 
the set of unitary transformations U(A^). li A € U(-/V), then for all 7 £ [0, 2tt), the transformations 
e^'^A are different, however the corresponding superoperators are identical. We will therefore focus 
on V{N)/\J{1). 

2.3 Measurements 

Measurements form another important class of (non-unitary) CPSOs. They describe physical 
transformations corresponding to the observation of the system. We will define now formally one 
of the simplest classes of measurements which correspond to the projections to elements of the 
computational basis. 

A Von Neumann measurement in the computational basis of n qubits is the n-qubit CPSO M 
that, for every density matrix p, satisfies M{p)i_i = pi^i and M{p)i_j = 0, for i ^ j. 

In the case of one qubit, the Von Neumann measurement in the computational basis maps the 
density matrix p{p,a) into p{p,0). We will say that p = (0|p|0) is the probability of measuring 
|0)(0|, and we will denote it by Pr°[/9]. 

In general, a Von Neumann measurement of n qubits in any basis can be viewed as the Von 
Neumann measurement in the computational basis preceded by some unitary superoperator. 
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2.4 The Bloch Ball representation 

Specific for the one-qubit case, there is an isomorphism between the group U(2)/U(l) and the 
special rotation group SO (3), the set of 3 x 3 orthogonal matrices with determinant 1. This allows 
us to represent one-qubit states as vectors in the unit ball of M^, and unitary superopcrators as 
rotations on R^. Wc will now describe exactly this correspondence. 

The Bloch Ball B (respectively Bloch Sphere S) is the unit ball (respectively unit sphere) of 
the Euclidean afSne space 'S?. Any point « e determines a vector with the same coordinates 
which we will also denote by u. The inner product of u and v will be denoted by (u, v), and their 
Euclidean norm by . 

Each point w e can be also characterized by its norm r > 0, its latitude 6 € [0,7r], and 
its longitude G [0, 27r). The latitude is the angle between the z-axis and the vector 71. and the 
longitude is the angle between the a;-axis and the orthogonal projection of u in the plane defined 
by z = 0. liu={x,y,z), then these parameters satisfy x = rsm9cos(p, y = r sin 9 sirup and 
z = rcosO. 

For every density matrix p for one qubit there exists a unique point p = {x, y,z) £ B such that 

_ 1/ 1 + z X — iy \ 
^ ~ 2\x + iy I- z ) ' 

This mapping is a bijection that also obeys 

p{p, a) = (2Re(a),2Im(a),2p- 1). 

In this formalism, the pure states are nicely characterized in B by their norm. 

Fact 1 A density matrix p represents a pure state if and only ifpGS, that is, \\p\\ = 1. 

Also, if ^ G [0,7r] and G [0,27r) are respectively the latitude and the longitude of tp G S, 
then the corresponding density matrix represents a pure state and satisfies lip) = cos(0/2)|O) + 
sin(0/2)e*'''|l). Observe that the pure states and \ip'^) are orthogonal if and only ii tp = —tp-^. 
We will use the following notation for the six pure states along the x, y and z axes: j^^) = 
^(|0) ± |1)), IC^) = :^(|0) ±i|l)), IC+) = |0), and |Cj) = |1), with the respective coordinates 
(±1, 0, 0), (0, ±1, 0) and (0, 0, ±1) in _ 

For each CPSO G, there exists a unique affine transformation G over M'^, which maps the ball 
B into B and is such that, for all density matrices p, G{p) = G{p). Unitary superopcrators have 
a nice characterization in B. 

Fact 2 The map between U(2)/U(l) and S0(3), which sends A to A, is an isomorphism. 

For a e (— 7r,7r], 9 G [0, f], and ip G [0, 27r), we will define the unitary transformation Ra,e,,p 
over C2. If IV-) = cos(6'/2)|0) + e^'^ sin(6l/2)|l) and \ip-^) = sin(6'/2)|0> - e^'^ cos(6l/2)|l) then by 
definition Ra,e,ip\ip) = I"*/") and Ra,e,ifi\'4''^) = e^°'\tp-^}. If A is a unitary superoperator then we 
have A = Ra,e,ifi for some a, 9, and ip. In the transformation Ra,e,ip is the rotation of angle a 
whose axis cuts the sphere S in the points ijj and tp-^. Note that for ^ = the CPSO Ra,o,tp does 
not depend on (p. We will denote this phase rotation by Ra- 

The affine transformation in B which corresponds to the Von Neumann measurement in the 
computational basis is the orthogonal projection to the z-axis. Therefore it maps p = (x, y, z) 
into (0,0, z), the point which corresponds to the density matrix i^|0)(0| + Thus 
Pr°M = 

2.5 Norm and distance 

Let TV = 2". We will consider the trace norm on C^^^ which is defined as follows: for all 
V G C^^^ , II y 111 = TiVV^V. This norm has several advantages when we consider the difference 
of density matrices. Given a Von Neumann measurement, a density matrix induces a probability 
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distribution over the basis of the measurement. The trace norm of the difference of two density 
matrices is the maximal variation distance between the two induced probabihty distributions, over 
all Von Neumann measurements. It also satisfies the following properties. 

Fact 3 For all density matrices pij), a) and p{q, [3) for one qubit we have: 

\\p(p,a)-p{q,p)l = ||^(^-^(^|| = 2^ip-qy + \a^l3\^. 

Fact 4 For allV eC^""^ and W e C^''''^^ we have \\V(E)W\\i = ||F||i||H^||i and \Tt{V)\ < \\V\\i. 
For density matrices p it holds that \\p\\i — 1. 

For n-qubit superoperators, the superoperator norm associated to the trace norm is defined as 

IIGIloo = sup{||G(^^)||i : ||y||i = 1}. 

This norm is always 1 when G is a CPSO. The norm || ||oo can be easily generalized for fc-tuples 
of superoperators by ||(Gi, . . . , Gk)\\oci = niax(||Gi||oo, • ■ • , ||Gfc||oo)- We will denote by distoo the 
natural induced distance by the norm || ||oo- 

3 Properties of CPSOs 

Here we will establish the properties of CPSOs that we will need for the characterization of our 
CPSO families. In this extended abstract we will omit the proof of Lemma |l|, and the proof of 
Lemma |] will be in Appendix 

Lemma 1 Let G be a CPSO for one qubit, and let p and r be density matrices for one qubit. 

(a) \\G{p)-G{t)1 < \\p-Th. 

(b) If G is not constant and G{p) is a pure state then p is a pure state. 

An affine transformation of M'^ is uniquely defined by the images of four non-coplanar points. 
Surprisingly, if the transformation is a CPSO for one qubit, the images of three points are some- 
times sufficient. The following will make this precise more generally for n qubits. 

Lemma 2 Let n > 1 be an integer, and let pi, pi, and p3 be three distinct one-qubit density 
matrices representing pure states, such that the plane in containing the points pi, P2, ps goes 
through the center of B. If G is a CPSO for n qubits which acts as the identity on the set 
{pi, P2, Pa}®", then G is the identity mapping. 

We also use the property that for CPSOs unitarity and invertibility are equivalent (see e.g. 
1^, Ch. 3, Sec. 8]). 

Lemma 3 Let G be a CPSO for n qubits. If there exists a CPSO H for n qubits such that H oG 
is the identity mapping, then G is a unitary superoperator. 

4 Characterization 

4.1 One-Qubit CPSO Families 

In this section, every CPSO will be for one qubit. First we define the notion of experimental 
equations, and then we show that several important CPSO families are characterizable by them. 
An experimental equation in one variable is a CPSO equation of the form 

PAG'i\b){b\)] = r, (1) 
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where A: is a non-negative integer, b £ {0, 1}, and < r < 1. We will call the left-hand side of the 
equation the probability term, and the right-hand side the constant term. The size of this equation 
is k. A CPSO G will "almost" satisfy the equations if, for example, it is the result of adding small 
systematic and random errors (independent of time) to a CPSO that does. For e > 0, the CPSO 
G e-satisfies (0) if \Ft° [G"" {\b) {b\)] - r| < e, and when e = we wih just say that G satisfies (|^). 
Let (E) be a finite set of experimental equations. If G e-satisfies all equations in (E) we say that 
G e-satisfies (E). If some G satisfies (E) then (E) is satisfiable. The set {G : G satisfies (E)} 
will be denoted by J'{e)- A family J-' of CPSOs is characterizable if it is ^(e) for some finite set 
(E) of experimental equations. In this case we say that (E) characterizes T . 

All these definitions generalize naturally for m-tuples of CPSOs for to > 2. In what follows we 
will need only the case to = 2. An experimental equation in two CPSO variables is an equation of 
the form 

Pr°[F''i oG'i o-.-oF''^* oG'''(|6)(fe|)] = r, 

where ki, . . . , fcj, Zi, . . . ,lt are non- negative integers, b G {0, 1}, and < r < 1. 

We discuss now the existence of finite sets of experimental equations in one variable that 
characterize unitary superoperators, that is, the operators Ra.e.ip, for a G (— 7r,7r], 9 e [0,7r/2], 
and If S [0,27r). First observe that due to the restrictions of experimental equations, there are 
unitary superoperators that they cannot distinguish. 

Fact 5 Let a G [0,7r], 6 G [0,7r/2], and >pi,(p2 G [0; 27r) such that (pi ^ (p2. Let (E) be a finite set 
of experimental equations in m variables. If {Ra,e,<pi , G2, ■ • • , Gm) satisfies [E) then there exist 
G2, . . . , G'„ and G'^, . . . , G"„ such that {R^a,e,<pi,G2, . . . , G'^) and {Ra^e^^^^G'^, . . . , both 
satisfy {E). 

In the Bloch Ball formalism this corresponds to the following degrees of freedom in the choice of 
the orthonormal basis of R^. Since experimental equations contain exactly the states |0)(0| and 
|1) (1| there is no freedom in the choice of the z-axis, but there is complete freedom in the choice of 
the X and y axes. The indistinguishability of the latitude (p corresponds to the freedom of choosing 
the oriented a;-axis, and the indistinguishability of the sign of a corresponds to the freedom of 
choosing the orientation of the y-axis. 

We introduce the following notations. Let TZa^e denote the superoperator family {R±a,e,if> ■ 
if G [0,27r)}. For tp G [0,27r), let the NOT^ transformation be defined by NOT^|0) = e*'^|l) 
and NOT^(e"^|l)) = |0), and recall that the Hadamard transformation obeys H^\0) — (|0) + 
e*'^|l))/\/2 and 77^(e^'^|l)) = (|0) - e*'^|l))/V2. Observe that = -R^,V4,v and NOT^ = 
R-k,-kI2,^, for LP G [0, 27r). Finally let U ^ {H^ : G [0, 27r)}, and M = {NOT^ : e [0, 27r)}. 

Since the sign of a cannot be determined, we will assume that a is in the interval [0, tt] . We will 
also consider only unitary superoperators such that a/ir is rational. This is a reasonable choice 
since these superoperators form a dense subset of all unitary superoperators. For such a unitary 
superoperator, let Ha be the smallest positive integer n for which na — mod 27r. Then either 
tIq = 1, or tIq > 2 and there exists t > 1 which is coprime with such that a — {t/na)2TT. 
Observe that the = 1 corresponds to the identity superoperator. 

Our first theorem shows that almost all families TZa^e are characterizable by some finite set of 
experimental equations. In particular Ti. is characterizable. 

Theorem 1 Let {a, 9) G (0,7r] x (0, 7r/2]\{(7r, 7r/2)} be such that a/n is rational. Let Zk{a,9) — 
cos^ 9 + sin^ 9cos{ka). Then the following experimental equations characterize TZ^.e- 

Pr°[G"°(|l)(l|)]-0 and PrO[G'=(|0)(0|)] = i + 0), fc G {1, 2, . . . , n J. 

Proof: First observe that every CPSO in TZafi satisfies the equations of the theorem since the 

^-coordinate of fij;,e,^(|0) (0|) is Zk{a,9) for every (p G [0, 27r). Let G be a CPSO which satisfies 
these equations. We will prove that G is a unitary superoperator. Then, Fact || implies that 
G G TZa,e- 
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Since zi{a,9) ^ ±1, we know G(|0) (0|) ^ {|0)(0|, |1)(1|}. Observing that G"°(|0)(0|) = |0)(0|, 
Lemma 0(b) implies that G(|0)(0|) is a pure state. Thus |0)(0|, |1)(1|, and G(|0)(0|) are distinct 
pure states, and since G"° acts as the identity on them, by Lemma ^ it is the identity mapping. 
Hence by Lemma ^ G is a unitary superoperator. ■ 

Fact 6 Let a e (0,7r], 9 e (0,7r/2], a' G (— 7r,7r], 0' G (0,7r/2] be such that a/ir is rational. If 
Zk{a, 0) = Zk{a' , 0'), for k £ {1, 2, . . . , rio,}, then \a'\ = a and 9' — 0. 

The remaining families TZa,e for which a/n is rational are {R-a-, Ra}, for a G [0,7r], and 
JV. Let us recall that M is the CPSO which represents the Von Neumann measurement in the 
computational basis. Since M satisfies exactly the same equations as R±a, and NOTooAi" satisfies 
exactly the same equations as NOTj^, for any (p G [0, 27r), these families are not characterizable 
by experimental equations in one variable. Nevertheless it turns out that together with the family 
H they become characterizable. This is stated in the following theorem whose proof is omitted. 

Theorem 2 The family {(ff;^,NOTy) : ip G [0, 27r)} C H x J\f is characterized by the experi- 
mental equations in two variables {F,G): 

Pr°[F(|0)(0|)] = i, PAF'mm = 1, Pr°[F2(|l)(l|)] = 0, 

PrO[G(|0)(0|)]=0, PrO[G(|l)(l|)] = l, 

Pr°[FoG2oF(|0)(0|)] = 1, Pr°[FoGoF(|0)(0|)] = 1. 

If a/n is rational, then the family TL x {R±a} is characterized by the experimental equations in 
two variables {F,G): 

PrO[F2(|0)(0|)] = l, Pr°[F2(|l)(l|)]=0, 
PrO[G(|l)(l|)] = 0, 
1, Pr°[Fo Go F(|0) (0|)] = i + icos a. 



r Pr°[F(|0)(0|)] = i, 
I Pr"[G(|0)(0|)] = l, 
[ Pr°[FoG"° oF(|0)(0|)] = 



4.2 Characterization of c-NOT gates 

In this section we will extend our theory of characterization of CPSO families for several qubits. 
In particular, we will show that the family of c-NOT gates together with the family H is charac- 
terizable. First we need some definitions. 

For every (/? G [0, 27r), we define c-NOTi^ as the only unitary transformation over satisfying 
C-NOT^(IO)IV)) = \0)\ij) and c-NOT^|l)|V) = |1)N0T^|V'), for aU |V) G C^. 

We extend the definition of the experimental equation for CPSOs given in (Q) for n qubits. It 
is an equation of the form 

Pr''[F'=ioG'io...oF'='oG'*(|w)(w|)] = r, (2) 

where in addition to the notation of (p[) v, w G {0, 1}", and Pr" is the probability of measuring 
For the variables F and G of (0), we also allow both the tensor product of two CPSO 
variables and the tensor product of a CPSO variable with the identity. We now state the charac- 
terization. 

Theorem 3 The family {(i?^, c-NOT;^) : ip G [0,27r)} is characterized by the experimental 
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equations in two variables (F,G): 
■ Pr°[F(|0)(0|)] = i, Pr°[F2(|0)(0|)] = 1, Pr°[F^(|l)(l|)] = 0, 

PrO"[G(|00)(00|)] = l, Pr°i[G(|01)(01|)] = l, Pr"[G(|10)(10|)] = 1, Pri°[G(|ll)(ll|)] = 1, 

< Pr°''[(/2(»F)oGo(J2<8F)(|00)(00|)] = 1, Pri°[(/2 ® F) o G o (/a ® F)(|10)(10|)] = 1, 

Pr""[(F ® I2) o G^ o (F ® J2)(|00)(00|)] = 1, Pr°i[(F ® I2) o G^ o (F ® J2)(|01) (01|)] = 1, 

^ Pr°°[(F(g)F)oGo (F®F)(|00>(00|)] = 1. 

Proof: Let F and G satisfy these equations. By Theorem |l|, with a — n and 6 — 7r/4, the 
first three equations imply that F = H^p, for some ip e [0, 27r). Using Lemma ^ the remaining 
equations imply that G^ = I4, and it follows from Lemma [s] that G is a unitary CPSO. A 
straightforward verification then shows that indeed G = c-NOT,^. ■ 

5 Robustness 

In this section we introduce the notion of robustness for experimental equations which will be the 
crucial ingredient for proving self-testability. In this extended abstract we will deal only with the 
case of experimental equations for one qubit and in one variable. From now on (E) will always 
denote a set of such equations. Similar results can be obtained for several qubits and several 
variables. 

Definition 1 Let e,6 > 0, and let (E) be a finite satisfiable set of experimental equations. We 
say that {E) is (e, (5)-robust if whenever a CPSO G e-satisfies {E), we have distoo{G,J-(^E)) l£ ^■ 

When a CPSO family is characterized by a finite set of experimental equations (E), one would 
like to prove that (E) is robust. The next theorem shows that this is always the case. 

Theorem 4 Let (E) be a finite satisfiable set of experimental equations. Then there exists an 
integer k > 1 and a real C > such that for all e > 0, (E) is (e, Ce^^'^ ) -robust. 

Proof: We will use basic notions from algebraic geometry for which we refer the reader for 
example to In the proof, C is identified with R^. Then the set I'C of CPSOs for one qubit is a 
real compact semi-algebraic set. Suppose that in {E) there are d equations. Let / : if — > R be the 
function that maps the CPSO G to the maximum of the magnitudes of the difference between the 
probability term and the constant term of the i^^ equation in (E), for i = 1, . . . ,d. By definition 
of /, we get /~^(0) = J^{E)- Moreover, / is a continuous semi-algebraic function, since it is the 
maximum of the magnitudes of polynomial functions in the (real) coefficients of G. 

Let g : K ^ M. defined in G by .g(G) = distoo(G, JFj-^-,). Since K is a compact semi- algebraic 
set, g is a continuous semi- algebraic function. Moreover, for all G G if, we have /(G) = if and 
only if g{G) = 0. Then Fact |7| concludes the proof. ■ 

For a proof of the following fact, see for example Prop. 2.3.11]. 

Fact 7 (Lojasiev^ricz's inequality) Let X C M™ be a compact semi- algebraic set. Let f,g:X^ 
M be continuous semi- algebraic functions. Assume that for all x £ X , if f(x) = then g(x) — 0. 
Then there exists an integer /c > 1 and a real C > such that, for all x £ X, \g{x)\'' < C\f{x)\. 

In some cases we can explicitly compute the constants C and k of Theorem ^ We will illustrate 
these techniques with the equations in Theorem ^ for the case a — tt and 6 = tt/A. Let us recall 
that these equations characterize the set Ti.. 

Theorem 5 For every < e < 1, the following equations are (e,4579y/e)-robust: 
Pr°[G(|0)(0|)] = i, PrO[G2(|0)(0|)] = 1, and PrO[G2(|l) (1|)] = 0. 
The proof of this theorem will be given in Appendix 
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6 Quantum Self- Testers 



In this final section we define formally our testers and establish the relationship between robust 
equations and testability. Again, we will do it here only for the case of one qubit and one variable. 
Let G be a CPSO. The experimental oracle 0[G] for G is a probabilistic procedure. It takes 
inputs from {0, 1} x N and generates outcomes from the set {0, 1} such that for every /c e N, 

Pr[O[G](6,fc) = 0] = PAG'i\b){b\)]. 

An oracle program T with an experimental oracle 0[G] is a program denoted by T'-'I'^l which can 
ask queries from the experimental oracle in the following sense: when it presents a query (&, k) to 
the oracle, in one computational step it receives the probabilistic outcome of 0[G] on it. 

Definition 2 Let T be a family of CPSOs, and let < Si < 62 < 1. A {Si, 6 2) -tester for T is a 
probabilistic oracle program T such that for every CPSO G, 

• i/distoo(G,J^) < 5i then Pr[T<^[<^l says PASS] > 2/3, 

• i/distoo(G,J^) > 52 then Pr[T<^[<^l says FAIL] > 2/3, 

where the probability is taken over the probability distribution of the outcomes of the experimental 
oracle and the internal coin tosses of the program. 



Theorem 6 Let e,5 > 0, and let {E) be a satisfiable set of d experimental equations such that the 
size of every equation is at most k. If (E) is (e,d)-robust then there exists an (e / {3k) , S) -tester 
for !F(^E) which makes 0{d\i\.{d) j e^) queries. 

Sketch of proof. We wih describe a probabihstic oracle program T. Let G be a CPSO. We 
can suppose that for every equation in {E), T has a rational number f such that |f — r| < e/6, 
where r is the constant term of the equation. By sampling the oracle 0[G], for every equation 
in (E), T obtains a value p such that |j5 — p| < e/6 with probability at least 1 — l/(3(i), where p 
is the probability term of the equation. A standard Chernoff bound argument shows that this is 
feasible with 0(ln(d)/e^) queries for each equation. If for every equation |p — f| < 2e/3, then T 
says PASS, otherwise T says FAIL. Using the robustness of {E) and Lemma |[ one can verify that 
T is a (£/(3fc), 5)-tester for ■ 

Lemma 4 Let (E) be a finite satisfiable set of experimental equations such that the size of every 
equation is at most k, and let G be a CPSO. For every £ > 0, i/ distoo(G, JFj^;)) < e then G 
(ke)- satisfies (E). 

Our main result is the consequence of Theorems |l|, ||, ^, ^ ^, |[ and the many-qubit generalizations 
of them. 

Theorem 7 Let T be one of the following families : 

• 7^-01,0 for {a, 6) e (0, tt] x (0, 7r/2]\{(7r, 7r/2)} where a/n is rational, 

• {{H^,NOT^) : [0,2^)}, 

• 7i X {R±a} for a/n rational, 

• {(Jf^,c-NOT^) : [0,27r)}, 

• {(/f^,i?,,/4,c-NOT^) :(^G [0,2^),s = ±l}. 

Then there exists an integer k > 1 and a real C > such that, for all e > 0, has an (e, Ce^^'^)- 
tester which makes 0{l/e'^) queries. Moreover, for every < e < 1, Ti. has an (e/6, A579y/e) -tester 
which makes 0(l/e^) queries. 

Note that each triplet of the last family forms a universal and fault-tolerant set of quantum gates [|| . 
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A Appendix: Proof of Lemma |2| 

Proof of Lemma ^. Let P be the plane defined in by pT, P2 and pj. To simplify the 
discussion, we suppose w.l.o.g. that (^t and (^x are in P. Every one-qubit p satisfying p G P is a 
linear combination of pi, p2 and p^. Therefore by linearity of G we get that it acts as the identity 
on {p : p e P}^". Moreover it is sufficient to show that G is the identity on density matrices 
representing non-entangled pure states, since they form a basis for all density matrices. 

For this, for every k, let Ak be the set of density matrices representing fc-qubit non-entangled 
pure states, and let Bk = {Cx , Ct}^" ■ We will show by induction on k that, for every < k < n, 
the CPSO G acts as the identity on ® Bn^^. The case fc = follows by the hypothesis of the 
lemma. 

Suppose the statement is true for some k. Fix a € A^ and r G B^-k-i- For every one-qubit 
density matrix p let p denote the n-qubit density matrix a ® p® t. 

We now prove that G{p) = p, for every p € Ai. For this, we use the fact that the density 
matrix representing the entangled EPR state (|00) -|- |ll))/-\/2, can be written in terms of 
tensor products of the C, states: 

*+ - i(C®C + c-®c + C®C + c®C)-5(C®C + c®C)- 

This can be generalized for the pure state \p) = (|0)|0) + |l)|l))/\/2: 

= \{Qt ®Qt + Q ®Q +Ct ®Ct + C ®Ct + Cv ®~Qv)- 

If we apply the CPSO /21 ®Gio the state p we get: 

(72. ® G)(m) = i(c+ ® It + C ® C + Ct ® It + C ® C - ® G{lt) - C ® GiCy)). 

If \ip) and \lp') arc orthogonal n-qubit pure states, then let 'I'^^/ = {W)^) — / Since 

<I>~^, is orthogonal to all symmetric 2n-qubit pure states of the form -0 (g) -0, by projecting (72" ® 
G){p) to ^^^p: we obtain: 

{%^-\{i2^ ® G){^i)\%^,) = -\{%^^Qt ® G(c+)|<i>-^,) - ® G{;-)\%^,). 

Since G is a CPSO, the left-hand side of this equality is non- negative and in the right-hand side 
both terms are non-positive. Therefore for every orthogonal n-qubit pure states \lp) and | (/?'), we 
get 

A straightforward calculation then shows that G{^y^) = ■ Therefore G acts as the identity 
on density matrices C,t , Ct and C,t ^ which generate all density matrices, and thus G{p) = p. ■ 

B Appendix: Proof of Theorem |^ 

Fact 8 Let G he a superoperator on C^"^^ . Let < e < 1 be such that \\G{Ct) - 111; l|G(C^) - 
Clli, WGiCt) - 111 < e; then \\G ~ J2II00 < 8e. 

Lemma 5 Let u and v be two orthonormal vectors in R^ , and < e < 1 a constant. If G is a 
CPSO for one qubit such that ||G(±?l) - ±u|| < e and ||G(±u) - ±iJ|| < e, then \\G - /2II00 < 24l£. 

Proof: We can suppose w.l.o.g. that u — (t and v — (t ■ Let p = G(Cjj"), where p = {x,y,z). 
From Lemma |l| it follows that ||G(C^) — p||i < IC^ — Cij^||i = V2- By the assumption of this lemma 
we have that ||G(C^) — ||i < e, and hence ||Cz^ — p||i < V2 + e. The same relation holds also for 
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the other three fixed points Q , and Cx ■ As a result, the three coordinates of p have to obey 
the four inequahties 

+ if + {z± If and {x ± 1)2 + 2/2 + 22 < {^/2 + ef < 2 + 4e (3) 

A second set of restrictions on (x, y, z) comes from the complete positivity of G. Again we use 
the decomposition of the EPR state 5*+, to analyze the two-qubit state: 

(/2®G)(vI/+) ^ i(C+®G(C+) + C®G(C)) + ^(C®G(C+) + C®G(C)) 
-i(C+®G(C+) + g®G(C-)). 

Using the hypothesis, the projection of this state onto the anti-symmetrical entangled qubit pair 
|$-) = (|01>-|10»/\/2 yields 

($-|(J2 ® G)(*+)|<i>-) < 2£ - i(<I>-|C,+ ® G(C+)|<1>-) - i(<I'-|C ® G(C-)|$->. 

Since G is a CPSO, as in Lemma || we get ($~|(^+ ® ) 4£. A straightforward calculation 
shows that this last relation is equivalent with a restriction on the y coordinate: y > 1 — 16e. 

This last inequality implies > 1 — 32£, which combined with the restrictions of (||), leads to 
the conclusion that {x ±\f <2 + ~ y^ ~ <\ 36e, and similarly (z ± 1)^ < 1 + 36e. The 
X and z coordinates of p satisfy \z\ < I8e. 

These bounds imply 

l|G(C)-CI|l = + (^y_ 1)2 + ,2 < 

The same result can be proved for ^~ . Therefore by Fact ^ we can conclude the proof. ■ 

Proof of Theorem ^. Let G be a CPSO which e-satisfies t he equati ons. First we will show 
there is a point ]) £ S with z-coordinate whose distance from G(|0)(0|) is at most lOy/e. The 
last two equations imply that ||G2(|6)(6|) - \b){b\\\i < for 6 = 0, 1. Therefore ||G2(|0)(0|) - 

G^(|l)(l|) ||i > 2 - and by Lemma |l](a) we have ||G(|0)(0|) - G(|l)(l|)||i > 2 - 6^. Thus 
||G(|6)(6|)|| > 1 -6Ve, for 6 0,1. Let r = where G(|0)(0|) = pip,a). The first equation 

implies that ||t - G(|0)(0|)|| < 2e. Therefore for p = t/\\t\\ we get ||G(|0 )(0|) - p\\i < 10^6. 

The point p on 5 uniquely defines (p £ [0, 27r) such that ff^3(|0)(0|) = p. One can verify that 
H^^ o G acts as the identity with error at most 19^/e on the four density matrices |0)(0|, |1)(1|, 
i?^(|0)(0|), and iJy(|l)(l|). From Lemma | we conclude that ||G- J?^||oo < 4579Ve. ■ 
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